33560 matches found
CVE-2014-10391
The CVE-2014-10391 entry concerns the WordPress plugin WP Support Plus Responsive Ticket System, specifically versions prior to 4.1. The vulnerability is a JavaScript injection (XSS) flaw caused by insufficient validation of client-side data in the plugin. Impact is that an attacker could trigger...
CVE-2014-10392
The CVE-2014-10392 entry concerns the WordPress cforms2 plugin, specifically versions before 10.2, which are affected by a cross-site scripting (XSS) vulnerability. The vulnerability is due to an XSS flaw in the plugin’s handling of input, allowing an attacker to inject and execute client-side sc...
CVE-2014-10394
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header...
CVE-2014-10394
The CVE-2014-10394 entry affects the WordPress Rich Counter plugin prior to version 1.2.0. The vulnerability is a JavaScript injection resulting from a crafted User-Agent header, as documented across multiple sources (NVD entry and vendor/Red Hat references). The practical impact is an injection ...
CVE-2014-10383
creationtimestamp| type| source ---|---|--- 2019-08-22 18:28:45+00:00| seen| https://t.me/cibsecurity/6301...
CVE-2014-10384
creationtimestamp| type| source ---|---|--- 2019-08-22 18:28:44+00:00| seen| https://t.me/cibsecurity/6300...
CVE-2014-10385
creationtimestamp| type| source ---|---|--- 2019-08-22 18:28:43+00:00| seen| https://t.me/cibsecurity/6299...
CVE-2014-10384
The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion...
CVE-2014-10383
The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion...
CVE-2014-10385
CVE-2014-10385 affects the memphis-documents-library WordPress plugin prior to version 3.0. The vulnerability is an XSS flaw triggered via the $_REQUEST parameter, allowing an attacker to inject and execute client-side script in affected pages. The impact is described as cross-site scripting; no ...
CVE-2014-10384
The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion...
CVE-2014-10384
CVE-2014-10384 affects the memphis-documents-library WordPress plugin prior to version 3.0. The root cause is Local File Inclusion (LFI), allowing an attacker to access local files via the vulnerable plugin. Remote/unsanitized input handling is identified in the CVE entries, with multiple nationa...
CVE-2014-10383
The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion...
CVE-2014-10383
The memphis-documents-library plugin for WordPress (before 3.0) is affected by a Remote File Inclusion vulnerability. The root cause is an input handling/validation weakness that can lead to inclusion of remote files, with potential compromise of affected sites. Mitigation per sources is to updat...
Sql injection
The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316...
CVE-2014-10377
creationtimestamp| type| source ---|---|--- 2019-08-21 22:38:21+00:00| seen| https://t.me/cibsecurity/6271...
CVE-2014-10378
creationtimestamp| type| source ---|---|--- 2019-08-21 22:38:20+00:00| seen| https://t.me/cibsecurity/6270...
CVE-2014-10379
creationtimestamp| type| source ---|---|--- 2019-08-21 22:38:19+00:00| seen| https://t.me/cibsecurity/6269...
CVE-2014-10380
The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms...
CVE-2014-10377
CVE-2014-10377 affects the WordPress plugin cforms2 (before 13.2). The vulnerability is an XSS in lib_ajax.php within the cforms2 component. The issue allows injection of crafted data leading to potential client-side code execution and partial integrity impact per CVSS 3.1 metrics, with network a...